a8eddb0bdec5bfc899cfb816bb4d58050dff97dd4e89be02833c24cba5e395a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8eddb0bdec5bfc899cfb816bb4d58050dff97dd4e89be02833c24cba5e395a5
Size

63KB
MD5

08e1534bfb3120494729983ed0dd65bd
SHA1

db709384d05b1ed5bed23f3d8f15b407aa59ea6d
SHA256

a8eddb0bdec5bfc899cfb816bb4d58050dff97dd4e89be02833c24cba5e395a5
SHA512

2ce317fcd5ee85c7bc8fb6ab2bd444aad575d31799e316e7094b30432ee89577cffa6cfc0ad1aef1fdb527264608e25da266e490af06bb144032222cd7a4630b
SSDEEP

1536:v42f/TAsM/6N/RuZh75A8bKdPNp0ygXVqZ0:wkDpEzNA8bK1L0ygFW0

Score

N/A

Malware Config

Signatures

Files

a8eddb0bdec5bfc899cfb816bb4d58050dff97dd4e89be02833c24cba5e395a5
.exe windows x86

3af63f39d2956b663f7eaa94609ce77a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryA
FatalAppExitW
VirtualAlloc
DuplicateConsoleHandle
GetCurrencyFormatW
InitializeCriticalSection
FreeResource
EnumResourceLanguagesA
GetFirmwareEnvironmentVariableA
FindFirstVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE